MGASA-2015-0460
Updated python-cryptography packages fix security vulnerability
The OpenSSL backend prior to 1.0.2 made extensive use of assertions to check response codes where our tests could not trigger a failure. However, when Python is run with -O these asserts are optimized away. If a user ran Python with this flag and got an invalid response code this could result in undefined behavior or worse (rhbz#1267548).
The python-cryptography and python-cryptography-vectors packages have been updated to version 1.0.2 and python-pyasn1 has been updated to version 0.1.8, fixing this issue.
What each source reports
OSV No score
Updated python-cryptography packages fix security vulnerability
The OpenSSL backend prior to 1.0.2 made extensive use of assertions to check response codes where our tests could not trigger a failure. However, when Python is run with -O these asserts are optimized away. If a user ran Python with this flag and got an invalid response code this could result in undefined behavior or worse (rhbz#1267548).
The python-cryptography and python-cryptography-vectors packages have been updated to version 1.0.2 and python-pyasn1 has been updated to version 0.1.8, fixing this issue.
- Record
MGASA-2015-0460- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
python-cryptographyMageia:5 |
before 1.0.2-1.mga5 | 1.0.2-1.mga5 |
python-cryptography-vectorsMageia:5 |
before 1.0.2-1.mga5 | 1.0.2-1.mga5 |
python-pyasn1Mageia:5 |
before 0.1.8-1.mga5 | 0.1.8-1.mga5 |
python-idnaMageia:5 |
before 2.0-1.mga5 | 2.0-1.mga5 |
python-ipaddressMageia:5 |
before 1.0.15-1.mga5 | 1.0.15-1.mga5 |
python-cffiMageia:5 |
before 1.1.2-1.mga5 | 1.1.2-1.mga5 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
MGASA-2015-0460 is a vulnerability with no CVSS score yet in python-cryptography, published November 27, 2015. No source lists public exploit code. Fixed in python-cryptography 1.0.2-1.mga5.